Filebeat Windows : no event when log file contains 1 line

[Youkoulayley (Baptiste Mayelle)]

Hi,

I have filebeat installed on a WIndows machine. My file contain the result of a sql request. So the file is always truncated and contain either 0 line or 1 line.

But when the file contains just one line, filebeat doesn't send event. I see in the log file :

INFO Non-zero metrics in the last 30s: filebeat.harvester.closed=1 filebeat.harvester.files.truncated=1 filebeat.harvester.open_files=-1 filebeat.harvester.running=-1 publish.events=1 registrar.states.update=1 registrar.writes=1
2017-09-20T10:24:25+02:00 INFO No non-zero metrics in the last 30s
2017-09-20T10:24:41+02:00 INFO Harvester started for file: C:\temp\trace.txt

But when i add an empty line before or after the line I want the event is sent.

Do you know why ?

Thanks in advance.

[andrewkroh]

@Youkoulayley

But when i add an empty line before or after the line I want the event is sent.

Do you know why ?

Filebeat needs to read a newline to know that the log line is complete.

[Youkoulayley (Baptiste Mayelle)]

Ok , thank you, I will add a line then